Russian cyber-criminals are hard to arrest, because there is no extradition treaty between the US and Russia. The Russian government allows them to prosper as long as they do not attack anything in Russia. The Russian government also contracts with these criminal groups when they need some state sponsored hacking done, a la Grizzly Steppe. In Russia, these guys are considered to be just very successful business men. They have achieved ...
I use LastPass to manage all my passwords, and recommend LastPass to my clients and followers. Often, when I am talking about storing passwords in the cloud, as LastPass does, I get concerned questions about the safety of storing your digital “keys” online. What happens if LastPass is breached?
Well, the bad news is that they were breached around June 15, 2015. I remember getting the email alert from them at the ...
Continue Reading →
I will also be speaking at this event, also sponsored by First State Bank and Trust. This will be at the Stillwater Public Library, 224 Third St No, Stillwater, MN 55082, from Thursday May 4, 2017, from 8:00 am to 9:15 am.
Here is the EventBrite link.
Up to 95% of network intrusions are invited by ...
Continue Reading →
I will be the featured speaker at an event sponsored by First State Bank and Trust of Bayport, MN. The date is Tuesday May 23rd, 2017 from 6:00 pm to 7:15 pm. The location is Phipps Center For the Arts,109 Locust Street, Hudson, WI 54016
Here is the EventBrite link
Think you know how to recognize phishing emails? ...
Continue Reading →
A new exploit is using Microsoft Office documents to deliver malware. This is different from the reanimated macro exploits. If this exploit, the target will receive an Office document, such as a Word file, as an email attachment. Opening the attachment causes a malicious HTML application to be downloaded from the attackers C2 server. This is executed as an .hta file, disguised as an RTF file. The result is the ...
CAPTCHA, or Completely Automated Procedures for Telling Computers and Humans Apart, was a system first theorized by cryptographer Alan Turing in 1950. We find these little “I am not a robot” challenges popping up all over the place, especially when creating a new account, registering for a web service the first time, or sometimes as form of poor man’s two-factor authentication. ...
Everything you can think of and many things you have never dreamed of are being manufactured with little Linux operating systems and wireless Internet connections. Or in simpler terms, a brain, storage, and communications ability. This is the Internet of Things (IoT). Lots and lots of “smart” devices talking to each other and phoning home to some data collection or dissemination point. If only the people who are designing these ...
Is this existentialism? Reminds me of a Zen Buddhist koan. What is the sound of one hand clapping? Paying for parking before existing! From Pinterest.
Yes, I have. A “breach” is an computer security incident where a website’s data has been illegally accessed by cyber-attackers and released publicly.
I know that my main email account has been compromised in the past, and used for sending Spam, because my hosting provider disabled my email account and hosting account until I had an opportunity to change my password.
I know that all my websites are under continuous automated password guessing attack, ...
Continue Reading →